A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Engineering Science N4 Textbook Pdf Free Download Link

Engineering Science is a crucial subject for students pursuing National Certificate (NC) qualifications in various engineering fields. The N4 level is an essential milestone in this journey, as it builds on the foundational knowledge gained in earlier levels. A comprehensive textbook is vital for students to grasp the complex concepts and theories in Engineering Science N4. In this write-up, we will explore the importance of having access to a reliable textbook and provide guidance on how to obtain an Engineering Science N4 textbook in PDF format for free download.

Access to a reliable textbook is crucial for students pursuing Engineering Science N4. While there are several resources available online, students should ensure that they obtain the textbook from a reputable source. By following the guidelines outlined in this write-up, students can obtain an Engineering Science N4 textbook in PDF format for free download. It is essential to verify the credibility and accuracy of the textbook to ensure a solid foundation in Engineering Science. engineering science n4 textbook pdf free download

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.